Hydra

A Medium difficulty Linux machine involving a JWT authentication bypass via CVE-2026-29000, credential reuse to gain a foothold as a service account, and SSH certificate forgery using a readable CA private key to escalate to root.